2.9.3

Changelog

• chore(deps): bump coredns from v1.11.3 to v1.12.0 #12473 @bartsmykla
• chore(deps): bump golang from 1.23.3 to 1.23.5 #12581 @Icarus9913
• chore(deps): security update #12249 #12327 @kumahq
• chore(deps): upgrade envoy from 1.30.7 to v1.30.9 #12461 @lukidzi
• fix(cni): support bound service account token by reloading periodically (backport of #12592) #12623 @jijiechen
• fix(kds): remove context from map on stream close (backport of #12243) #12262 @lukidzi
• fix(policy): use new compute for rules and fix rules intersect (backport of #12340) #12515 @Icarus9913

2.8.6

Changelog

• chore(deps): bump coredns from v1.11.3 to v1.12.0 #12474 @bartsmykla
• chore(deps): bump envoy from 1.30.7 to 1.30.9 #12218 #12460 @lukidzi
• chore(deps): bump golang from 1.22.8 to 1.22.11 #12085 #12223 #12580 @Icarus9913,@lukidzi
• chore(deps): security update #12248 #12326 @kumahq
• fix(cni): support bound service account token by reloading periodically (backport of #12592) #12624 @jijiechen
• fix(k8s): always authenticate with latest service account token (backport #11399) #12586 @bartsmykla
• fix(k8s): clone annotations before modyfing #12338 @lukidzi
• fix(kds): remove context from map on stream close (backport of #12243) #12263 @lukidzi
• fix(policy): use new compute for rules and fix rules intersect (backport of #12340) #12516 @Icarus9913

2.7.11

Changelog

• chore(deps): bump coredns from v1.11.3 to v1.12.0 #12475 @bartsmykla
• chore(deps): bump envoy from v1.29.10 to v1.29.12 #12217 #12455 @lukidzi
• chore(deps): bump golang from 1.22.9 to 1.22.11 #12222 #12579 @Icarus9913,@lukidzi
• chore(deps): security update #12246 #12324 @kumahq
• fix(cni): support bound service account token by reloading periodically (backport of #12592) #12625 @jijiechen
• fix(k8s): always authenticate with latest service account token (backport #11399) #12587 @bartsmykla
• fix(k8s): clone annotations before modyfing (backport of #12338) #12342 @kumahq
• fix(kds): remove context from map on stream close (backport of #12243) #12264 @lukidzi
• fix(policy): use new compute for rules and fix rules intersect (backport of #12340) #12517 @Icarus9913

2.6.15

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): bump coredns from v1.11.3 to v1.12.0 #12476 @bartsmykla
• chore(deps): bump envoy from v1.29.10 to v1.29.12 #12216 #12454 @lukidzi
• chore(deps): bump golang from 1.22.9 to 1.22.11 #12221 #12578 @Icarus9913,@lukidzi
• chore(deps): security update #12247 #12325 @kumahq
• chore(deps): upgrade actions/cache from v4.0.0 to v4.2.0 (backport of #12485) #12488 @kumahq
• fix(k8s): always authenticate with latest service account token (backport #11399) #12588 @bartsmykla
• fix(k8s): clone annotations before modyfing (backport of #12338) #12341 @kumahq
• fix(kds): remove context from map on stream close (backport of #12243) #12265 @lukidzi
• fix(policy): use new compute for rules and fix rules intersect (backport of #12340) #12518 @Icarus9913

2.9.2

Changelog

• chore(deps): bump golang from 1.23.2 to 1.23.3 #12084 @lukidzi
• fix(meshpassthrough): Refactor MeshPassthrough implementation to generate correct route #12157 @kumahq
• fix(meshtrafficpermission): nil pointer for autoreachableservice when no top targetRef (backport of #12152) #12161 @kumahq

2.6.14

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): upgrade go from 1.22.8 to 1.22.9 #12087 @lukidzi
• fix(kds): clone resource on update meta (backport of #10460) #12121 @kumahq

2.7.10

Changelog

• chore(deps): upgrade go from 1.22.8 to 1.22.9 #12086 @lukidzi
• fix(kds): clone resource on update meta (backport of #10460) #12122 @kumahq

2.9.1

Changelog

• chore(deps): algin forked go-control-plane version with upstream #12029 @kumahq
• chore(deps): bump envoy from 1.30.6 to 1.30.7 #11958 @lukidzi
• chore(deps): security update #11982 @kumahq
• chore(deps): use latest kumahq/kuma-gui #11944 @kumahq
• fix(cni): delegated gateway was not correctly injected (backport of #11922) #11928 @kumahq
• fix(k8s): set annotation kuma.io/display-name for Secrets and Configs (backport of #11923) #11942 @kumahq
• fix(kuma-cp): avoid concurrent access on resource meta (backport of #11997) #12024 @kumahq
• fix(meshtimeout): don't set default timeouts on inbound cluster and listener (backport of #12043) #12049 @kumahq

2.6.13

This is a patch release that every user should upgrade to.

Changelog

• chore(deps): bump envoy from 1.28.7 to 1.29.10 #11960 @lukidzi
• chore(deps): security update #11975 @kumahq
• fix(k8s): set annotation kuma.io/display-name for Secrets and Configs (backport of #11923) #11940 @kumahq
• fix(kuma-cp): avoid concurrent access on resource meta (backport of #11997) #12021 @kumahq
• fix(store): preserve existing labels when update #11953 @kumahq

2.8.5

Changelog

• chore(deps): bump envoy from 1.30.6 to 1.30.7 #11957 @lukidzi
• chore(deps): security update #11973 @kumahq
• fix(k8s): set annotation kuma.io/display-name for Secrets and Configs (backport of #11923) #11943 @kumahq
• fix(kuma-cp): avoid concurrent access on resource meta (backport of #11997) #12022 @kumahq